Lucene search

K
osvGoogleOSV:RLSA-2024:2550
HistoryMay 10, 2024 - 2:32 p.m.

Moderate: buildah bug fix update

2024-05-1014:32:42
Google
osv.dev
8
buildah
oci container images
bug fix
cve-2024-24786
rocky linux9.4
jira
golang-protobuf
json
unmarshaling

5.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.6%

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images.

Bug Fix(es):

  • TRIAGE CVE-2024-24786 buildah: golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON [rhel-9] Rocky Linux9.4 0Day (JIRA:Rocky Linux-28230)